We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-5024

Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus



Description

A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being able to open files even after it is restarted via systemd.

Reserved 2025-05-21 | Published 2025-05-22 | Updated 2025-05-26 | Assigner redhat


HIGH: 7.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Problem types

Uncontrolled Resource Consumption

Product status

Default status
affected

Default status
affected

Default status
affected

Timeline

2025-05-21:Reported to Red Hat.
2025-05-21:Made public.

References

access.redhat.com/security/cve/CVE-2025-5024 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2367717 (RHBZ#2367717) issue-tracking

cve.org (CVE-2025-5024)

nvd.nist.gov (CVE-2025-5024)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-5024

Support options

Helpdesk Chat, Email, Knowledgebase